summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Expand)Author
2019-05-28Update copyright yearRichard Levitte
2019-02-26Go into the error state if a fatal alert is sent or receivedMatt Caswell
2018-11-24Honour mandatory digest on private key in tls1_process_sigalgs()David Woodhouse
2018-11-20Update copyright yearMatt Caswell
2018-11-10Fix 'no-ecdh' buildDr. Matthias St. Pierre
2018-11-02Properly handle duplicated messages from the next epochMatt Caswell
2018-08-14Update copyright yearMatt Caswell
2018-07-03Don't create an invalid CertificateRequestMatt Caswell
2018-06-25Fix some more gcc-9 warnings [-Wstringop-truncation]Bernd Edlinger
2018-05-12Don't memcpy the contents of an empty fragmentMatt Caswell
2018-05-02Fix comment in ssl.hMatt Caswell
2018-05-02Fix SSL_get_shared_ciphers()Matt Caswell
2018-04-27fix warning unused-but-set-variable 'alg_k' (no-dh and no-ec)Cristian Stoica
2018-04-27fix warning unused-but-set-variable 'nostrict' (no-dh and no-ec)Cristian Stoica
2018-04-20Fix the alert sent if no shared sig algsMatt Caswell
2018-04-17Ignore the status_request extension in a resumption handshakeMatt Caswell
2018-03-27Adds multiple checks to avoid buffer over readsPhilippe Antoine
2018-03-27make updateMatt Caswell
2018-03-27Update copyright yearMatt Caswell
2018-03-05Minor style fixup on recent commitBernd Edlinger
2018-02-22Checks ec_points_format extension sizePhilippe Antoine
2018-02-21Sanity check the ticket length before using key name/IVMatt Caswell
2018-02-09Swap the check in ssl3_write_pending to avoid usingBernd Edlinger
2018-01-30Make sure we check an incoming reneg ClientHello in DTLSMatt Caswell
2018-01-24Changed OPENSSL_gmtime so macOS uses threadsafe gmtime_r instead of gmtime.Jonathan Scalise
2018-01-24Cleanup ctxs if callback fail to retrieve session ticketJ Mohan Rao Arisankala
2018-01-09Tolerate DTLS alerts with an incorrect version numberMatt Caswell
2017-12-11Fix a switch statement fallthroughMatt Caswell
2017-12-08Standardize syntax around sizeof(foo)Rich Salz
2017-12-08Remove unicode characters from sourceRichard Levitte
2017-12-07Fix the buffer sizing in the fatalerrtestMatt Caswell
2017-12-07Fix initialisation in fatalerrtestMatt Caswell
2017-12-06Add a test for CVE-2017-3737Matt Caswell
2017-12-06Don't allow read/write after fatal errorMatt Caswell
2017-11-14Don't use SSLv3_client_method internally with no-ssl3Richard Levitte
2017-11-13Resolve warnings in VC-WIN32 build, which allows to add /WX.Andy Polyakov
2017-11-11ssltest.c: cb_ticket2 appears to not return a value when it "should"Richard Levitte
2017-11-07Fix error handling in heartbeat processingBernd Edlinger
2017-11-03Fix no-ssl3-method buildKurt Roeckx
2017-11-01Fix weak digest in TLS 1.2 with SNI.David Benjamin
2017-08-22Use casts for arguments to ctype functions.Pauli
2017-07-16Backport of 5b8fa43 and remove resolved TODO: see PR#3924.Bernd Edlinger
2017-06-21Add documentation for the SSL_export_keying_material() functionMatt Caswell
2017-06-01Fix ex_data memory leakTodd Short
2017-06-01Send a protocol version alertMatt Caswell
2017-05-26Fix inconsistent check of UNSAFE_LEGACY_RENEGOTIATION (1.0.2)Todd Short
2017-05-25Ignore -rle and -comp when compiled with OPENSSL_NO_COMP.Bernd Edlinger
2017-05-10Copy custom extension flags in a call to SSL_set_SSL_CTX()Matt Caswell
2017-04-11Additional check to handle BAD SSL_write retryRich Salz
2017-03-23Guard last few debugging printfs in libsslRichard Levitte